Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          dMzES0WXujgGXwf1gLrf3Hb4Xr2ZWusnvPDzKIOTccs=
Subject key identifier:   49:56:E2:A0:14:87:40:BF:69:62:38:53:E4:32:EF:4D:1B:DC:64:C7
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       0457
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          0456
Signing time:             Fri 31 Jan 2025 01:59:02 +0000
Manifest this update:     Fri 31 Jan 2025 01:59:01 +0000
Manifest next update:     Sun 02 Feb 2025 01:59:01 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: GVEJtNIvsfGK+BdA+tZ4Y9ToahBp7bCd8RIjTj4HLjI=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Jan 31 01:59:01 2025 GMT
            Not After : Feb  2 01:59:01 2025 GMT
        Subject: CN=679c2e65-48bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:d5:a8:e8:19:2a:99:f6:61:cc:68:b5:93:
                    8c:67:8b:ba:4f:15:52:1c:c0:f4:0d:a4:96:aa:99:
                    97:47:be:84:dc:a8:df:50:d5:97:57:05:3c:e5:94:
                    43:6c:4a:e6:67:86:65:02:1a:ba:3d:a5:b1:89:d1:
                    b7:18:12:9f:76:ee:d8:4f:17:8e:6e:41:37:39:08:
                    e4:fd:da:b2:25:1f:46:46:f2:6f:25:43:7b:33:28:
                    a2:fb:05:03:29:32:52:65:36:b1:5e:1b:d8:91:03:
                    a4:ba:7f:ca:df:89:0d:a4:1f:16:f9:6c:e6:5d:f9:
                    1f:09:52:9b:3d:ea:a8:f2:87:f9:2b:51:68:06:be:
                    96:a8:6a:53:68:22:16:1e:bd:e8:e2:35:3c:69:b2:
                    94:a0:aa:b4:53:03:9e:53:c6:8d:28:63:12:3c:81:
                    39:5e:6d:61:28:34:b5:e5:da:ed:4a:8f:11:ae:0b:
                    03:68:2d:c8:aa:6e:c8:a7:e1:e8:60:cc:3e:d8:95:
                    44:18:9c:3b:f3:b9:e7:c2:22:da:8b:50:57:57:a8:
                    8a:bb:40:32:0e:5e:b8:39:ee:0a:99:b7:6d:6a:79:
                    b8:b4:7c:1b:c9:b0:3c:c0:9f:40:21:20:63:eb:05:
                    5b:c7:6e:84:ad:30:bf:58:39:2b:47:22:6d:ca:8f:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:E2:A0:14:87:40:BF:69:62:38:53:E4:32:EF:4D:1B:DC:64:C7
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:f7:f9:ee:d9:8f:fd:45:4d:64:d1:90:0a:38:18:80:a7:
         11:78:8c:fb:b1:1b:dc:3a:66:31:73:27:19:c0:31:08:4e:98:
         e5:73:7a:4a:c9:b0:9e:ae:80:73:06:4b:25:4c:5c:75:52:fb:
         96:28:17:47:e9:00:51:69:80:67:30:cf:0e:42:e9:6a:e8:db:
         6d:72:59:91:c0:bc:41:f4:a2:73:41:3f:5c:82:86:12:05:ec:
         93:d3:41:12:9f:a6:44:47:42:5a:d0:fc:e5:b8:40:de:60:da:
         92:cd:b3:8b:42:43:b3:97:80:8e:45:10:f0:84:43:27:0f:da:
         dc:09:66:a1:ed:0f:06:92:9d:bf:de:d8:9a:49:36:02:ce:3c:
         9a:93:c0:67:82:ef:67:5b:82:c7:12:22:5c:82:84:83:e7:1f:
         5a:6b:b6:59:c0:4d:ea:9c:f2:68:1b:02:49:c3:93:1e:07:d6:
         69:15:de:2b:c2:4e:a8:3b:91:d3:f1:7f:e2:6b:37:e8:57:e4:
         85:31:1f:8b:8f:29:19:23:66:b2:44:9b:41:6d:92:b0:aa:28:
         03:cb:75:5f:25:98:61:5c:cb:af:cc:23:5a:8c:a0:45:f7:57:
         bc:d5:15:52:c5:f6:30:b4:5d:34:7d:95:88:c7:1b:84:97:9d:
         9c:5b:6b:b8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRFMjRBRjExMC8GA1UEBRMoREE5QzA2NEEyOTczODg5RjEwRDNBREQ5RkRGMTJB
ODgzNjEzNjRCRjAeFw0yNTAxMzEwMTU5MDFaFw0yNTAyMDIwMTU5MDFaMBgxFjAU
BgNVBAMTDTY3OWMyZTY1LTQ4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4fdWo6BkqmfZhzGi1k4xni7pPFVIcwPQNpJaqmZdHvoTcqN9Q1ZdXBTzl
lENsSuZnhmUCGro9pbGJ0bcYEp927thPF45uQTc5COT92rIlH0ZG8m8lQ3szKKL7
BQMpMlJlNrFeG9iRA6S6f8rfiQ2kHxb5bOZd+R8JUps96qjyh/krUWgGvpaoalNo
IhYevejiNTxpspSgqrRTA55Txo0oYxI8gTlebWEoNLXl2u1KjxGuCwNoLciqbsin
4ehgzD7YlUQYnDvzuefCItqLUFdXqIq7QDIOXrg57gqZt21qebi0fBvJsDzAn0Ah
IGPrBVvHboStML9YOStHIm3Kj5mNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSVbi
oBSHQL9pYjhT5DLvTRvcZMcwHwYDVR0jBBgwFoAU2pwGSilziJ8Q063Z/fEqiDYT
ZL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0RTI0L0EzMThBMTA4OTJGQjExRUNBNzE0MTE4OTVBNDBENTc3LzJwd0dT
aWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJwd0dTaWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRFMjQvQTMxOEExMDg5MkZCMTFFQ0E3MTQxMTg5NUE0
MEQ1NzcvMnB3R1NpbHppSjhRMDYzWl9mRXFpRFlUWkw4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC8/f57tmP/UVNZNGQCjgYgKcReIz7
sRvcOmYxcycZwDEITpjlc3pKybCeroBzBkslTFx1UvuWKBdH6QBRaYBnMM8OQulq
6NttclmRwLxB9KJzQT9cgoYSBeyT00ESn6ZER0Ja0PzluEDeYNqSzbOLQkOzl4CO
RRDwhEMnD9rcCWah7Q8Gkp2/3tiaSTYCzjyak8Bngu9nW4LHEiJcgoSD5x9aa7ZZ
wE3qnPJoGwJJw5MeB9ZpFd4rwk6oO5HT8X/iazfoV+SFMR+LjykZI2ayRJtBbZKw
qigDy3VfJZhhXMuvzCNajKBF91e81RVSxfYwtF00fZWIxxuEl52cW2u4
-----END CERTIFICATE-----